chore: bump dependencies

including `biscuit-auth` to `4.1.1`. This will fix an issue when displaying authorizer snapshots: all the facts and rules will be displayed, even when authorization has not been run yet.